What is GHSA-m6hw-6pp7-2ffc?

GHSA-m6hw-6pp7-2ffc is a security advisory published by GitHub Security Advisories with High severity. Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI...

Which CVE IDs does GHSA-m6hw-6pp7-2ffc cover?

GHSA-m6hw-6pp7-2ffc covers the following CVE IDs: CVE-2026-114635. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m6hw-6pp7-2ffc?

GHSA-m6hw-6pp7-2ffc has a CVSS v3 base score of 8.7, published by GitHub Security Advisories.

GHSA-m6hw-6pp7-2ffcHighCVSS 8.7

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI...

Vendor

GitHub Security Advisories

Published

October 22, 2026

Last Modified

October 22, 2026

🔗 CVE IDs covered (1)

CVE-2026-114635 →

📋 Description

Traefik before v2.11.58 and v3.7.14 contains an authentication bypass vulnerability in its SNI check, which is skipped when request TLS state is nil. Unauthenticated clients can send HTTP/2 requests with the :scheme http pseudo-header over TLS on Go 1.27 builds to reach routers requiring client certificates without presenting one.

🔗 References (4)

https://github.com/traefik/traefik/security/advisories/GHSA-fh26-gfpp-7xxx
https://nvd.nist.gov/vuln/detail/CVE-2026-114635
https://www.vulncheck.com/advisories/traefik-before-2.11.58-and-3.7.14-sni-check-bypass-via-http-2-scheme
https://github.com/advisories/GHSA-m6hw-6pp7-2ffc